Oracle Cloud Infrastructure Documentation

Connecting an SDDC to an On-premises Network

Learn how to connect your SDDC to an on-premises network.

The workflow for configuring connectivity between your SDDC and an on-premises network does the following:

  • Determines whether the VCN has an attached dynamic routing gateway (DRG), and if not, helps you create one.
  • Adds the route table, rules, or network security groups needed to enable routing between the DRG and the SDDC's NSX Edge Uplink 1 VLAN.

To use Oracle Cloud Infrastructure, you must be granted security access in a policy  by an administrator. This access is required whether you're using the Console or the REST API with an SDK, CLI, or other tool. If you get a message that you don’t have permission or are unauthorized, verify with your administrator what type of access you have and which compartment  to work in.

Note

  • In the workflow, you are prompted for the CIDR of the on-premises network. If you do not know this value, check with the on-premises network engineer or administrator before you begin. This CIDR value cannot be the same as the SDDC workload CIDR, and cannot overlap with the VCN's CIDR.
  • The workflow adds required route rules and security rules to the VCN resources. If you have reached your limits, you are prompted to check your existing rules and delete some to free up capacity.

Using the Console

  1. On the Details page of the SDDC, click Configure connectivity to your on-premises network
  2. Use the Networking wizard to set up the DRG, if needed. After the DRG setup is complete, you can continue with the workflow.
  3. Enter the SDDC workload CIDR. This CIDR block provides the IP addresses the VMware VMs use to run workloads. The minimum size is /30.
  4. Enter the CIDR of the on-premises network.
  5. Review the details of the planned updates to your networking resources. The workflow creates or updates route tables and rules that impact the NSX Edge Uplink1 VLAN, vSphere Replication Communication (v7.x only), and the DRG.

    If you choose to disallow an update, your SDDC might not have connectivity to your on-premises network. To complete the configuration, you can either return to the workflow later or make the required resource update manually outside of the workflow.

    If you have permissions to create a resource, then you also have permissions to apply free-form tags to that resource. To apply a defined tag, you must have permissions to use the tag namespace. For more information about tagging, see Resource Tags. If you're not sure whether to apply tags, skip this option or ask an administrator. You can apply tags later. To see the tagging options, click Show Advanced Options. The tags you specify are applied to all of the new resources created in this workflow.

  6. When you are satisfied with the configuration settings, click Apply Configuration.

    The Console displays the status of each operation in the workflow. In an error occurs, you can retry the operation. When you close the Applying Configuration window, you return to the SDDC Details page, which shows a summary of the resources that were updated and allows you to view each one by clicking the applicable link.